Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/D63D48DE604F11F0B5D8E73CC4F9AE02.roa
File:                     D63D48DE604F11F0B5D8E73CC4F9AE02.roa (raw, json)
Hash identifier:          XxDEetfTlIyWxtlYo1LDR5qxMb/Qs8lIUEk0uhrtD3o=
Subject key identifier:   D6:38:94:87:9A:D1:38:4A:0D:22:5A:2D:72:97:5F:79:43:BB:E9:76
Certificate issuer:       /CN=A91FE769/serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907
Certificate serial:       DE
Authority key identifier: 14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/D63D48DE604F11F0B5D8E73CC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 06:57:19 +0000
ROA not before:           Thu 03 Sep 2026 06:57:19 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     136254
IP address blocks:        103.153.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl
                          rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE769, serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907
        Validity
            Not Before: Sep  3 06:57:19 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a991a4f-06d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bf:5a:74:37:d7:bf:46:f9:e7:1d:7e:05:ea:
                    11:f0:63:d4:96:07:75:c1:5d:f8:8a:0b:75:40:9d:
                    78:94:f1:4e:83:61:11:d3:54:02:9c:68:43:9f:35:
                    5f:01:96:ec:33:f0:57:d4:39:48:ac:b7:17:4a:33:
                    11:05:db:fe:98:6b:24:57:ab:ee:a2:a3:99:6a:79:
                    02:f3:1c:01:3a:0d:3e:1c:86:a0:a1:66:25:be:8e:
                    5b:98:23:56:1f:96:f3:c6:13:e1:4f:78:90:85:94:
                    93:2e:e7:15:2f:ed:a6:71:5f:fc:35:f3:e3:d6:4d:
                    10:51:57:3d:67:d3:3d:ce:c2:24:01:1f:fb:27:0b:
                    ce:7e:27:5e:61:80:e4:d8:10:8d:32:b1:10:ea:36:
                    4f:81:3b:bb:d4:d1:d8:7a:13:4b:05:fd:4c:d3:bd:
                    b8:be:ed:32:44:df:c6:42:60:68:4c:df:d7:7b:f3:
                    21:0a:f3:38:f6:3c:aa:aa:18:fb:68:2d:68:bb:0d:
                    83:79:d0:87:a7:60:06:e7:19:3e:c3:2f:ee:88:4e:
                    85:c2:fe:ac:2f:4f:9f:18:ca:8e:41:58:62:8b:f1:
                    c1:48:b1:ee:b1:44:22:d6:20:63:f4:3b:ba:82:07:
                    4f:c8:23:de:21:bf:9a:9e:ba:24:f6:45:a4:28:83:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:38:94:87:9A:D1:38:4A:0D:22:5A:2D:72:97:5F:79:43:BB:E9:76
            X509v3 Authority Key Identifier:
                keyid:14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/D63D48DE604F11F0B5D8E73CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:a3:72:97:4b:e1:e7:47:36:fe:5f:97:0e:aa:57:97:b0:40:
         cc:2b:aa:27:8c:e6:2a:d7:ed:56:a7:01:3a:68:1d:b3:92:ef:
         b9:39:47:6f:06:30:cb:8c:9e:99:74:05:a5:e2:e6:50:5f:23:
         0f:94:8b:9d:a3:85:f0:6c:4f:c4:a7:91:95:ae:34:6f:d1:70:
         06:ba:f8:3e:ce:e6:ce:d6:88:d7:cd:a8:4e:d7:e8:50:25:d9:
         9a:49:d0:c5:29:42:6e:0e:c2:2c:e1:86:72:e3:c1:60:63:98:
         6a:56:b0:75:ff:a0:a0:c5:21:bc:d9:81:05:fc:ff:b5:49:d2:
         86:4f:8e:84:ce:37:1e:aa:9b:ea:cf:6c:20:99:77:5f:92:95:
         35:87:71:ce:14:2a:1b:67:fe:1b:2b:fe:49:43:e4:99:9b:45:
         63:10:bc:fd:d9:a9:25:58:80:b3:26:69:b4:95:06:69:34:e0:
         d9:d9:32:f6:41:01:fc:2f:4b:24:06:bb:95:a9:cd:69:01:42:
         53:2a:2d:9e:10:ea:a9:e1:cc:55:37:40:bb:42:ba:23:8b:38:
         d3:f9:52:0d:60:62:d3:ce:b9:00:d7:9b:4a:0a:f7:e8:52:9e:
         8f:08:13:08:dc:35:64:1a:9c:75:ec:86:5c:c9:3d:6c:3e:af:
         87:a0:92:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:35:23 2026 by rpki-client